General Terms and Conditions of Use

General Terms of Use

Our personal data protection policy helps to establish a relationship of trust between you and our services, aiming to provide you with a positive experience, fully transparently.

Thanks to this policy, we can address your requirements and meet your expectations.

To respect your trust, EURL EP PUBLISHING guarantees the respect of your personal data and the confidentiality of our clients (hereinafter "Your data").

For complete transparency, and to ensure secure use of our website https://curalight.com/pages/cgv in all its available versions and associated applications (hereinafter the "Site https://curalight.com/"), we provide details on how we process your data, ensuring that our services are always aligned with the respect of your rights. This way, we ensure security, confidentiality, and the integrity of your privacy and data across all our platforms.

Our policy and ourselves guarantee that all necessary precautions are taken to protect your data from disclosure, loss, or alteration. Therefore, we provide you with all the elements to easily understand how we handle your data. These data will be retained only for the necessary time required for processing and management. Of course, you can access and modify your data at any time, as they will be available in your personal space on curalight.com.

To this end, we strive to take all necessary measures to comply with applicable data protection laws.

Thus, EURL EP PUBLISHING undertakes, through this personal data protection policy, to respect the essential principles of the European General Data Protection Regulation (GDPR) and French law regarding personal data protection, by providing you with information about the existence and procedures of the data processing we apply (section 3), your rights regarding your data (sections 6 and 10), as well as ensuring the implementation of these rights (sections 6 and 10). Any information regarding possible transfers to third countries or recipients, the retention period for collected data (section 5), and security measures (section 9) will also be made available.

1. WHO ARE YOU?

When we refer to "you" in this Personal Data Protection Policy, we are addressing you as a client of EURL EP PUBLISHING, if you have placed an order on the website curalight.com, a client of EURL EP PUBLISHING if you created a client account but did not order any products or services, or if you have browsed the website curalight.com without creating a client account or placing an order.

2. WHO ARE WE?

EURL EP PUBLISHING is a company with a capital of 1,000 euros, registered in the LYON Trade and Companies Register under number 843051327. EURL EP PUBLISHING operates the curalight.com website and, as such, processes your data as the data controller.

3. WHAT PURPOSES DO WE USE YOUR DATA FOR?

3.1. When do we collect your personal data?
Your personal data may be collected when you visit the curalight.com website using cookies, when you create a customer account, when you place an order for one of our products or services, or when you subscribe to our newsletters (SMS, emails).

Your personal data helps to enhance your navigation experience on the curalight.com site, allowing us to offer a more personalized experience. This data is also used to process your orders, enable installment payments, prevent fraud, process necessary refunds, and manage your customer reviews.

3.2. Your navigation on the curalight.com Site
In order to allow you to navigate the curalight.com site, we process your data based on your consent.

3.3. Processing your orders
To manage your orders and process them, we use your data. The use of your data helps us with customer relations (including via social media), after-sales services, remote sales management, marketing actions, and commercial prospecting for curalight.com, as well as managing deliveries and transport of orders. The execution of the contract between both parties (you and us) is the legal basis for processing these data. The legal obligation of EURL EP PUBLISHING is the legal basis for processing regarding product recalls. Your consent or our legitimate interest, depending on the case, is the legal basis for marketing and commercial prospecting actions. Your consent is required for implementing the "flash" payment.

3.4. Installment payments
For orders involving installment payments and for certain clients, your data is processed to offer this payment option. The execution of the contract between both parties is the legal basis for processing the data. However, your consent remains the basis for processing your banking data.

3.5. Customer reviews
In order to share your reviews with our clients and visitors, and to allow you to leave a review on the curalight.com website, we use your data based on your consent or legitimate interest.

3.6. Payment recovery and fraud prevention
To ensure payment recovery and combat fraud, we process your data. This enables us to guarantee the security of payments. The execution of this contract and EURL EP PUBLISHING’s legitimate interest as the data controller are the legal bases for this processing.

3.7. Management of EURL EP PUBLISHING's advertising operations
The advertising operations of EURL EP PUBLISHING are managed using your data. This allows us to expand our customer and prospect data, manage the technical activities of prospects, conduct commercial statistics and advertising campaign studies, update our prospecting files, manage opposition to phone solicitation, solicitations, implement contests, lotteries, or any other promotional operation (excluding online gambling and gaming). The legal bases for the processing described above are your consent or EURL EP PUBLISHING’s legitimate interest.

4. WHERE DO YOUR DATA GO?

Your data is transmitted to several internal services of EP PUBLISHING. It is not sent to third parties except in the following situations:

To process your orders, your personal data may be transmitted to several service providers specializing in payment transactions, customer relations, after-sales service, delivery, IT development, website management, or providing warranties or insurance.

For installment payments, your data may be shared with service providers such as payment and transaction centers (banks), call centers managing business processes or customer experience, or client review management services. EP PUBLISHING’s advertising operations are managed using your data with advertisers and clients.

5. DATA RETENTION

The data collected by EP PUBLISHING is retained only for the time and assistance necessary for the implementation and completion of the operations mentioned in section 3 of our personal data policy.

We retain certain data collected by EP PUBLISHING for a period of time:

• For prospects: The data is stored in current archives for 3 years from the last customer contact (it is accessible to EURL EP PUBLISHING services). We do not perform intermediate archiving of this data (for data representing administrative interest for certain services, such as litigation, retention periods are set by applicable statute of limitations).

• For orders: Your data will be archived in current archives for 5 years from the end of the use of the customer's orders and in intermediate archives for 5 years from the end of storage in current archives. The same applies to customers.

1. About Banking Data

Banking data is archived in current archives for the entire validity period of the credit card (plus one day). No intermediate archiving is performed for banking data.

Cookies and their use, as well as their retention period, are detailed in section 7 of our policy.

2. Exercising Your Rights

6.1. Access, modification, and rectification of your data
You have the right to request access to, modification, and rectification of your personal data.

6.2. Limiting the processing of your data
Important clarification: for this, you must contest the accuracy of your personal data within the required timeframe so we can verify their compliance. Additionally, if you believe the use of your data is unlawful and wish to limit its use without requesting deletion, we may retain your data as long as it is useful for the establishment, exercise, or defense of your rights in court. This also applies if you exercise your right to object, during the verification period, to determine if legitimate grounds pursued by us override yours.

6.3. Requesting the deletion of your data
You have the right to request the deletion of your data. However, if you demand the deletion of your personal data, EURL EP PUBLISHING may nonetheless retain it in intermediate archives to comply with its legal, accounting, and fiscal obligations.

6.4. Opposition to processing for commercial prospecting
You have the right to object to processing for commercial prospecting purposes. In the case of email prospecting, you can request modification or unsubscribe from newsletters by clicking the "unsubscribe" link included in each newsletter or by navigating directly to the contact page of the site curalight.com. For SMS prospecting, you can unsubscribe by sending a "STOP" SMS or by navigating to the contact page of the curalight.com website.

6.5. Post-mortem instructions regarding the retention, deletion, or communication of your data
You have the right to issue post-mortem instructions regarding the retention, deletion, or communication of your personal data. In the absence of such instructions, your heirs or successors may request EURL EP PUBLISHING to access your data to organize or settle your estate, close your account, or stop processing your personal data. You may also request that your data not be shared with third parties upon your death.

6.6. Right to data portability
You have the right to request the portability of your data.

6.7. Withdrawal of consent
You have the ability to withdraw your consent at any time regarding the processing based on that consent. Important clarification: withdrawing consent does not affect the legality of processing carried out before the withdrawal.

6.8. Filing a complaint with the competent supervisory authority
You also have the right to file a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr). To exercise your rights, please send your request (along with your email, name, surname, a copy of your ID, and postal address) to the data protection delegation of EURL EP PUBLISHING by email at contact@curalight.com. We will respond within a maximum of one (1) month after receiving your request.

3. Cookies

7.1. What is a cookie?
When you browse a website like that of EURL EP PUBLISHING, it may, depending on your choices, place a text file called a cookie on your device (computer, phone, tablet). This cookie allows the website, like curalight.com, to identify your device on a subsequent visit. Only the sender of a cookie can read or modify the information contained in that cookie.

7.2. What are cookies used for on curalight.com?
Cookies can be classified into different categories. Some are issued directly by EURL EP PUBLISHING and its service providers, while others come from third-party companies.

7.2.1. Cookies issued by EURL EP PUBLISHING and its service providers
Several categories of cookies may be installed on your device when you browse our site:

7.2.1.1. Essential Cookies
These cookies are necessary to access the site and place orders. Without them, navigating the site and placing orders would be impossible. They also allow EURL EP PUBLISHING to monitor its activity.

7.2.1.2. Analytical and Personalization Cookies
These cookies are not mandatory, but they help improve your browsing experience, personalize your searches, and optimize our offers based on your expectations.

7.2.1.3. Advertising Cookies
These cookies are used to display relevant advertisements based on your previous browsing on our site and other sites. They also allow us to offer you ads tailored to your interests. These cookies are issued by EURL EP PUBLISHING, its service providers, or third parties through partnerships with advertisers.

7.2.2. Cookies issued by third-party companies
Third parties using cookies on our site apply their own privacy policies. These cookies are not necessary for using the site.

7.2.3. Cookies issued by third-party applications integrated into our site
When you use sharing or interaction buttons with social media (e.g., "share," "like"), these social networks may identify you, even if you have not directly used them on our site.

7.3. Managing cookies via your browser
Your browser allows you to control the use of cookies. You can accept or refuse them through your browser settings. However, refusing certain cookies may affect the quality of your navigation on our site, including the inability to place an order.

4. Transfers outside the European Union

Your data is mainly stored within the European Union. However, in some cases, it may be transferred to countries outside the European Union. In such cases, we take the necessary measures to ensure the protection of your personal data in accordance with applicable regulations.

5. Security Measures

We have implemented technical and organizational measures to ensure the security of your personal data. These measures comply with the identified risks and take into account industry requirements, such as the PCI DSS standard for payment security.

6. Profiling and Automated Decision Making

Some of your data processing is automated, such as profiling or identification for services like the 4x payment option. If the risk of fraud or non-payment is considered too high, certain options, like installment payments, may not be offered. You always have the option to challenge an automated decision.

7. Updates to the Data Protection Policy

This policy may be updated regularly to remain compliant with current legislation. The latest update was made on June 20, 2019.